Static task
static1
Behavioral task
behavioral1
Sample
6ad02294c5452e532a1e48c401a335a34cb47baaa8396da0c285819d485e18fc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6ad02294c5452e532a1e48c401a335a34cb47baaa8396da0c285819d485e18fc.exe
Resource
win10v2004-20220901-en
General
-
Target
6ad02294c5452e532a1e48c401a335a34cb47baaa8396da0c285819d485e18fc
-
Size
248KB
-
MD5
e00648f7507cb0beabc250e807d3a03d
-
SHA1
416491ab75e6e891053a924dbbaa0c4e91372eb8
-
SHA256
6ad02294c5452e532a1e48c401a335a34cb47baaa8396da0c285819d485e18fc
-
SHA512
3c3a934e6eefa0d61c80b32a6b7687372123a041a2d2f0bae2fce5bf575aee6861f902aae149b76a65c22218142db870e09e94caf13a226cc6c64c08323780cd
-
SSDEEP
6144:RMwIwki5wXZ7PC63Frbvf9IaSWLkySPIq6YKbNmab:RMW5e1rbv5oyST6XbNm
Malware Config
Signatures
Files
-
6ad02294c5452e532a1e48c401a335a34cb47baaa8396da0c285819d485e18fc.exe windows x86
37a7743a5007d9097f5ce88e355247d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
ImageList_Write
ImageList_Remove
ImageList_DragMove
DrawInsert
user32
LoadMenuIndirectA
CopyAcceleratorTableW
GetKeyNameTextW
TabbedTextOutA
DialogBoxParamW
UnionRect
SetUserObjectInformationW
DefWindowProcA
LoadStringW
RegisterClassA
GetMessageW
SetScrollInfo
GetMenuItemID
GetKeyboardLayoutList
CloseDesktop
CreateIconFromResource
GetClipboardSequenceNumber
ClipCursor
BroadcastSystemMessageW
SetPropA
GetSubMenu
MessageBoxW
CreateWindowExA
IsCharAlphaNumericA
GetWindowLongW
GetTitleBarInfo
ClientToScreen
EnumDisplaySettingsExW
GetKeyboardType
EnumWindowStationsA
IsWindowEnabled
ChangeClipboardChain
LoadBitmapA
RegisterClassExA
DestroyWindow
ShowWindow
DlgDirListW
SetDeskWallpaper
kernel32
GetVersion
FreeEnvironmentStringsW
InterlockedIncrement
IsBadWritePtr
HeapCreate
GetStringTypeA
GetCurrentProcess
ContinueDebugEvent
GetEnvironmentStrings
GetSystemTime
VirtualFree
GetLocalTime
OpenMutexA
SetStdHandle
GetModuleHandleA
GetStringTypeW
GetTimeZoneInformation
GetCurrentThreadId
GetCPInfo
GetEnvironmentStringsW
GetStartupInfoA
LCMapStringA
GetACP
ExitProcess
HeapDestroy
GetTickCount
SetEnvironmentVariableA
FlushFileBuffers
InterlockedExchange
LeaveCriticalSection
TlsAlloc
SetHandleCount
SetFilePointer
SetLastError
FreeEnvironmentStringsA
InterlockedDecrement
ReadFile
QueryPerformanceCounter
HeapReAlloc
GetProcAddress
TlsGetValue
GetCurrentThread
CreateMutexA
WideCharToMultiByte
VirtualQuery
GetCommandLineA
LCMapStringW
CompareStringA
GetUserDefaultLangID
TlsFree
FindResourceA
GetPrivateProfileSectionW
TerminateProcess
GetCurrentProcessId
OpenEventW
GetLastError
GetStdHandle
GetSystemTimeAsFileTime
WaitCommEvent
TlsSetValue
WriteFile
VirtualAlloc
RtlUnwind
EnterCriticalSection
LoadLibraryA
CompareStringW
DeleteCriticalSection
MultiByteToWideChar
GetOEMCP
UnhandledExceptionFilter
HeapAlloc
GetFileType
HeapFree
CloseHandle
InitializeCriticalSection
GetModuleFileNameA
advapi32
RegNotifyChangeKeyValue
RegRestoreKeyW
RegReplaceKeyA
CryptSetProvParam
RegCloseKey
CryptGenKey
CryptEnumProvidersW
RegOpenKeyA
LogonUserA
CryptExportKey
CryptDuplicateKey
CryptAcquireContextW
RegEnumKeyExW
RegEnumValueW
RegCreateKeyExA
RegEnumKeyExA
CryptCreateHash
CryptSetHashParam
gdi32
CreateEnhMetaFileW
SetBoundsRect
IntersectClipRect
GetTextCharset
FrameRgn
CreateColorSpaceW
CreateScalableFontResourceA
GetClipBox
EndPage
GetCharWidthW
SetPixelFormat
CopyMetaFileW
BeginPath
CreateFontIndirectA
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ